CVE-2026-37067

CVE-2026-37067 Control de acceso incorrecto en /vfm-admin/admin-panel/view/save-cvs.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado extraer todos los registros de la aplicación a partir de una fecha deseada mediante una solicitud POST especialmente diseñada...

CVE-2026-37067

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

PT-2026-82670

Name of the Vulnerable Software and Affected Versions Veno File Manager Project version 4.4.9 Description Incorrect access control in the '/vfm-admin/admin-panel/view/save-cvs.php' endpoint allows an unauthenticated attacker to extract all application logs from a specified date onwards by sending...

CVE-2026-37067: Improper Access Control

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

CVE-2026-37067

An incorrect access control vulnerability exists in the Veno File Manager Project 4.4.9 within the /vfm-admin/admin-panel/view/save-cvs.php component. This flaw allows an unauthenticated attacker to extract all application logs from a specific date onwards by sending a specially crafted POST requ...

CVE-2026-37067

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

OCS Inventory NG < 1.02.1 Information Disclosure Vulnerability - Active Check

OCS Inventory NG is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DEBIAN-CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

UBUNTU-CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

CVE-2009-2166: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

OCS Inventory NG 1.02 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== OCS Inventory NG 1.02 Remote File Disclosure Vulnerability ========================================================== OCS Inventory NG - Directory Traversal May 30 2009 Product Ope...